IOSXE 17.9.2 -Issue with ThousandEyes agent installation on Catalyst

[bipinchandra]

I have been told that there is a security vulnerability on IOSXE 17.9.2 code to run ThousandEyes agent on Catalyst 9300/9400. And the vulnerability is CSCwd25783. But I could not find this vulnerability in cisco websites.

Can anyone help me clarify about this vulnerability. 

[balaji.bandi]

as per i know anything above 17.3.X  should work as expected, I have tested 17.3.3 and 17.3.6 as expected working (some proxy issue around I am digging more debugs to fix that) if no proxy involved all good here. There are some additional docker options required I still did not find information, on how the app can use Local NTP and Local DNS in a corporate environment if you use Public DNS and public NTP works as expected.

what is your issue here ? installation or security issue only concerned?

[bipinchandra]

Hi Balaji,

Thank You for the response

My concern is that we have been told that there an App-hosting security issues identified

Cisco has not yet announced any information as there’s no fixed release version yet (just SMU patch on top of 17.9.2).

The major vulnerabilities has been fixed by the Cisco  with the patched SMU(snapshot below) which we have to install post upgrading the IOS.

What is this vulnerability. I cannot find it anywhere in Cisco websites..  

[balaji.bandi]

thank you, not that i am aware, contact TAC.